
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
File: vNzosG8FliNAMAycR0e1olGiGcQ.mft (raw, json)
Hash identifier: FgZuW0AgKnYgc6ik8h9/C4ZMsW/FL+Fr8N0XrrA3gYI=
Subject key identifier: 90:60:22:9C:1A:A4:DF:F6:9A:E7:E0:34:28:B6:10:BB:C5:91:6C:24
Authority key identifier: BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4
Certificate issuer: /CN=A91C65E8/serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4
Certificate serial: 3573
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
Manifest number: 3561
Signing time: Mon 22 Jun 2026 14:54:10 +0000
Manifest this update: Mon 22 Jun 2026 14:54:09 +0000
Manifest next update: Mon 29 Jun 2026 14:54:09 +0000
Files and hashes: 1: vNzosG8FliNAMAycR0e1olGiGcQ.crl (hash: qYDR/iC1vj88msuq8mwRCNWBtLP5YLDMKDWq6RDZbmw=)
2: 3FEFA562483D11EC82E81112C4F9AE02.roa (hash: pMo/am4pbVZVWLjF2BRkcuubhLlI+aH0WTEo1tPr5yU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.crl
rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 14:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13683 (0x3573)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C65E8, serialNumber=BCDCE8B06F05962340300C9C4747B5A251A219C4
Validity
Not Before: Jun 22 14:54:09 2026 GMT
Not After : Jun 29 14:54:09 2026 GMT
Subject: CN=6a394c91-f4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:d4:ee:b0:25:b5:28:2e:32:b0:ed:66:61:
a9:96:a5:4b:ca:89:64:4f:e7:e7:39:ca:66:06:51:
0a:fc:65:64:8e:97:50:c3:d1:8c:e2:46:40:e8:8b:
f4:f9:18:8b:45:00:41:7b:15:e8:43:a9:dd:69:25:
97:0f:1b:14:39:2f:30:73:f3:b1:81:8d:c0:8e:89:
c4:6c:a2:b2:92:56:a5:3f:ea:59:be:19:e5:5d:e7:
fa:a4:eb:63:6b:8c:fd:6c:8c:86:a7:c8:5d:1e:79:
75:70:c0:e0:61:f3:33:12:55:f6:f4:e5:00:f7:1d:
4c:69:6a:06:72:a7:41:4b:cc:4d:a6:af:ac:62:4d:
f6:6e:94:cf:a0:e5:71:8f:7f:60:f3:1e:33:bc:26:
c4:88:0b:75:25:12:ca:2e:ef:ca:a1:3c:01:63:e0:
14:f1:95:e3:45:c4:12:d8:2f:42:b1:17:dc:45:20:
4b:45:c1:7f:86:d2:13:49:64:f6:99:8a:8c:6e:35:
44:75:e5:28:11:27:f7:a1:d2:52:cb:e3:df:f2:88:
5d:40:62:51:19:55:51:3b:b4:78:34:37:3e:4f:5e:
0f:8d:79:f0:a3:ad:62:3e:e7:f7:01:e0:25:f3:e6:
c9:fe:da:58:91:f2:25:dc:6d:1a:6a:ae:55:e7:12:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:60:22:9C:1A:A4:DF:F6:9A:E7:E0:34:28:B6:10:BB:C5:91:6C:24
X509v3 Authority Key Identifier:
keyid:BC:DC:E8:B0:6F:05:96:23:40:30:0C:9C:47:47:B5:A2:51:A2:19:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vNzosG8FliNAMAycR0e1olGiGcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C65E8/A1F23A641D9911E295EB528608B02CD2/vNzosG8FliNAMAycR0e1olGiGcQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:68:6f:ab:48:ee:4b:e0:fb:8a:39:29:04:ad:b0:dc:c1:83:
0a:d0:4c:1f:bd:83:19:32:c7:ae:27:ee:ca:2d:50:f6:2e:87:
29:9a:3d:fc:1c:b5:0d:ef:4a:af:1b:aa:c9:37:05:b4:d4:0f:
b1:6f:2d:4b:54:ff:cb:a3:d3:1f:41:c6:6b:e8:72:cc:96:bd:
7d:e8:12:a7:6c:3c:e6:2e:29:fb:cb:4b:ab:17:5a:c6:3f:42:
0a:c1:cd:1d:af:5e:d2:16:a9:65:18:88:35:8f:d7:53:7d:d2:
00:f7:65:6e:f4:33:43:b4:5c:35:41:27:62:c2:f1:1c:af:68:
76:fb:48:a2:fd:8c:23:3e:97:3c:df:c9:79:7b:22:e4:e1:aa:
cd:b7:bf:d1:5f:1f:5f:e3:24:71:b9:47:fc:d9:8b:9f:83:af:
f8:1d:89:7d:66:37:31:6b:db:c7:db:3a:d0:98:89:f5:a3:d8:
be:0a:8c:af:7a:de:4e:6e:d4:3d:b3:19:cb:c1:db:76:d1:65:
c9:93:de:64:75:fa:a5:18:ea:68:8a:16:dd:dd:33:db:af:0e:
ad:e2:2c:42:05:b1:70:9a:27:98:65:f4:0e:4c:77:e7:4f:dc:
43:4f:b4:ee:17:62:9a:a9:60:ae:68:87:0a:25:11:b6:96:89:
76:44:16:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:17 2026 by rpki-client